---
id: CVE-2020-7655
aliases:
  - GHSA-wm2m-xrrp-j74c
  - PYSEC-2020-242
  - SNYK-PYTHON-NETIUS-569141
title: HTTP Request Smuggling in netius
summary: HTTP Request Smuggling in netius
severity: medium
cvss: 6.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'
vendor: netius
product: netius
ecosystem: pip
affected:
  - netius < 1.17.58
patched:
  - netius 1.17.58
published: '2021-06-18'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:49:27.161288701Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-wm2m-xrrp-j74c'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2020-7655'
  - url: >-
      https://github.com/hivesolutions/netius/commit/9830881ef68328f8ea9c7901db1d11690677e7d1
  - url: 'https://github.com/advisories/GHSA-wm2m-xrrp-j74c'
  - url: 'https://github.com/hivesolutions/netius'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/netius/PYSEC-2020-242.yaml
  - url: 'https://snyk.io/vuln/SNYK-PYTHON-NETIUS-569141'
tags:
  - osv
  - pip
epss: 0.00819
epssPercentile: 0.55704
ingestedAt: '2026-09-12T03:13:01.736Z'
---

## Overview

netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Transfer encoding header parsing which could allow for CL:TE or TE:TE attacks.

## Affected packages

- `netius < 1.17.58`

## Remediation

Upgrade to a patched release:

- `netius 1.17.58`